CVE-2024-26817

In the Linux kernel, the following vulnerability has been resolved:amdkfd: use calloc instead of kzalloc to avoid integer overflowThis uses calloc instead of doing the multiplication which mightoverflow.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.75% chance of exploitation in the next 30 days, 53th percentile

Published

2024-04-13

Updated

2026-05-11

Proof-of-concept exploits (1)

• MaherAzzouzi/CVE-2024-26817-amdkfd7★ · 2024-04-14

References

• CVE Record
• NVD entry

Related

• CVE-2022-37704
• CVE-2022-37705
• CVE-2022-37706
• CVE-2022-47952
• CVE-2024-2681
• CVE-2024-2682